
October 21, 2019 

Cass County, Texas 
Amy Varnell 
P.O. Box 449 
Linden, TX 75563 
(903) 756-5071 
(903) 756-8057 

amv.countyclerk@casscountytx.org 

Re: Ensuring that every Texas voter can cast a secure, auditable, & verifiable vote 

Dear Ms. Varnell, 

Our groups share a goal of ensuring that every eligible Texas voter is able to cast an effective 
vote. To that end, we are reaching out to urge you to take steps to initiate a process to implement 
a secure and reliable voting system in Cass County. If you have already taken those steps, we 
commend you and would like to hear about them. 

As you may know, the Hart InterCivic eSlate paperless voting machines that the County 
currently uses for Election Day voting are insecure, unreliable, and not auditable. Decades of 
independent research and widespread bipartisan consensus confirm this. We would like to work 
with you to ensure that Cass County adopts secure, verifiable, and auditable voting systems at 
the earliest possible date—preferably by the 2020 election—and that this initiative becomes a 
priority for your office. To that end, we have set out below some information and resources to 
explain the urgency of ensuring that all Cass County voters have access to a secure and reliable 
voting system as soon as possible. 

1. Cass County’s Voting System Suffers from Serious Deficiencies 

The Voting System is Aging, Insecure, and Cannot be Audited 

Experts agree that outdated voting technology poses serious risks of leaving votes uncounted due 
to hacking or mechanical breakdown. 1 Direct Recording Electronic (DRE) systems, which cast 


1 See, e.g ., National Academies of Sciences, Engineering, and Medicine, et al. Securing the Vote: Protecting 
American Democracy (National Academies Press, 2018), https://www.nap.edU/download/25120# (“NAS Report”); 








and count ballots digitally, are doubly dangerous: they are more likely to fail (because they offer 
pathways that malicious hackers can exploit and rely on obsolete technology that is increasingly 
likely to malfunction), and they produce no record outside their software that can be used to 
catch mistakes through audits or recounts. 

Outdated voting technology such as paperless DRE machines is not good enough for Texas 
voters and should be phased out. Last year, the Senate Intelligence Committee found that DRE 
machines, like the eSlate, “are at highest risk for security flaws” and urged their replacement. 2 
Similarly, the National Academy of Science convened a group of leading national experts to 
assess the needs of U.S. election systems to operate reliably in the current threat environment. 
Their report concluded that “[vjoting machines that do not provide the capacity for independent 
auditing . . . should be removed from service as soon as possible.” Their consensus was that 
“[ejections should be conducted with human-readable paper ballots.” 3 And leading computer 
scientists and cybersecurity experts at Texas’s most preeminent institutions have delivered the 
same message loudly and clearly: “paper records (collected in a secure, private way) are 
indispensable to a secure elections system.” 4 

None of this is breaking news. Texas’s insecure voting machines, and particularly the eSlate, 
have been covered in Texas Monthly, 5 Vice Magazine, 6 and Politico. 7 The eSlate machines used 
in your County are particularly outdated, insecure, and susceptible to error. Over a decade ago, 
independent researchers identified significant security flaws in the eSlate machines that you use 
today. 8 First, the eSlate’s network interface—that is, the port used to network machines together 


Lawrence Norden and Christopher Famighetti, “America’s Voting Machines at Risk” 13, Brennan Center for Justice 
at New York University School of Law (2015), available at https://www.brennancenter.org/publication/americas- 
voting-machines-risk . 

2 Staff of S. Select Comm. On Intelligence, 115th Cong., Russian Targeting of Election Infrastructure During the 
2016 Election: Summary’ of Initial Findings and Recommendations, at 4 (2018), available at 
https://www.burr.senate.gov/imo/media/doc/RussRptInstlmtl-%20ElecSec%20Findings,Recs2.pdf . The same 
committee reaffirmed that finding in a report issued earlier this year: “Aging voting equipment, particularly voting 
machines that had no paper record of votes, were vulnerable to exploitation by a committed adversary.” S. Select 
Comm, on Intelligence, 116th Cong., “Russian Active Measures Campaigns and Interference in the 2016 U.S. 
Election, Volume 1: Russian Efforts Against Election Infrastructure,” at 4 (2019) (“SSCI Report”), available at 
https://info.publicintelligence.net/SSCI-RussianAttacksElectionInfrastiiicture.pdf . 

3 NAS Report at 80. 

4 Letter to Secretary Pablos and Director Ingraham from Texas Computer Scientists and Cybersecurity Experts (May 
10, 2018), available at https://www.cs.rice.edu/~dwallach/voting-experts-letter-mav-2018.pdf (and attached). 

5 Michael Agresta, Can Hackers Mess with Texas’s Elections?, Texas Monthly (Oct. 10, 2018), available at 
https://www.texasmonthlv.com/politics/can-hackers-mess-texass-elections/ 

6 Kim Zetter, Texas’s Voting Machines Have Been ‘a Known Problem ’for a Decade, Vice Magazine (Oct. 30, 

2018), available at https://www.vice.com/en us/article/negayg/texas-voting-machines-have-been-a-known- 
problem-for-a-decade. 

7 Eric Geller, How an Election Security Push is Running Aground in Texas, Politico (Aug. 5, 2019), available at 
https://www.politico.com/storv/2019/08/05/election-security-texas-1445537 

8 Srinivas Inguva et al. Source Code Review of the Hart InterCivic Voting System (“Source Code Review”) (July 
20, 2007), available at https://votingsvstems.cdn.sos.ca.gov/oversight/ttbr/Hart-source-public.pdf 
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at polling places—is not secured against a direct attack, and researchers were able to read and 
write to the machines’ memory through the port. This is not a bug, but a “feature^ intentionally 
designed into the system which can be used in a fashion for which they were never intended.” 9 
Second, the machines contain basic programming errors that can allow malicious code to run on 
a machine. 10 Third, the machines use no or insecure cryptography (the computer code that is 
supposed to secure a machine’s communications). 11 Worse, “[m]any of these attacks can be 
mounted in a manner that makes them extremely hard to detect and correct,” with “many of them 
[able to] be carried out in the field by a single individual, without extensive effort, and without 
long-term access to the equipment.” 12 Taken together, these risks—known for over a decade to 
the election community—make the eSlate particularly vulnerable to attack and malfunction. 

Using machines that are at or near their manufacturer-recommended lifespan only makes matters 
worse. Aging equipment increases the cybersecurity risk because older systems fall well behind 
the current state of the art in cybersecurity measures, and software or the operating system used 
to run the systems may no longer be receiving security updates. 13 

The Shortcomings of Cass County’s Voting System Are Exacerbated by the Threats Facing U.S. 
Elections 

Election security is a national security issue—and there is widespread, bipartisan agreement that 
U.S. elections are at risk. The U.S. Director of National Intelligence recently appointed an 
election threats executive, explaining that election security is “a top priority for the intelligence 
community—which must bring the strongest level of support to this critical issue.” 14 The FBI 
agrees, and has said that “the threat from nation-state actors remains a persistent concern.” 15 And 
on September 24, 2019, a leading cyber threat intelligence organization issued a report warning: 
“It is unequivocally clear . . . that the Russians invested a significant amount of money and effort 
in the first half of this year to build large-scale espionage capabilities. Given the timing, the 


9 Id. at i. 

10 Kim Zetter, Texas’s Voting Machines Have Been ‘a Known Problem ’ for a Decade, Vice Magazine (Oct. 30, 

2018) , available at https://www.vice.com/en us/article/negayg/texas-voting-machines-have-been-a-known- 
problem-for-a-decade. 

11 Source Code Review at i-ii. 

12 Source Code Review at ii. 

13 See NAS Report at 92. 

14 Ken Dilanian, U.S. Spy Chief Creates New Head of Election Security for Intelligence Agencies, NBC (July 19, 

2019) , available at https://www.nbcnews.com/politics/national-securitv/u-s-spv-chief-creates-new-head-election- 
security-intelligence-n 1031841. 

15 Josh Lederman & Mike Memoli, 2020 Campaigns Get Trump Administration Help on Cybersecurity, 
Counterintelligence, NBC (Sept. 23, 2019), available at https://www.nbcnews.com/politics/2020-election/202Q- 
campaigns-get-tmmp-administration-help-cvbersecurity-counterintelligence-n 1057366. 
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unique operational security design, and sheer volume of resource investment seen, ... we may 
see such an attack carried out near the 2020 U.S. Elections.” 16 

This threat environment adds stress to outdated voting systems where none is needed: systems 
must accurately count every valid ballot while sophisticated adversaries seek to undennine them. 
And, voting systems with longstanding and well-studied vulnerabilities, like the eSlate, face 
greater risks than other systems. 

To meet this threat, jurisdictions should administer elections on modem systems using paper 
ballots. At least 122 Texas counties will use paper systems this November; 17 and 40 out of 50 
states will use only paper systems by November 2020. 18 

2. The U.S, Constitution Requires Voting Systems that Ensure that Every Voter Can 
Cast an Effective Vote 

The only way to make sure all Texans’ votes are counted is to have a record of every vote that 
cannot be altered by machine failure or hacking. Every voter deserves a voting system that meets 
independently-developed best practices. 19 Most importantly, whatever machines Cass County 
adopts should provide voters the means and opportunity to verify human-readable marks on 
paper that correctly represent their intended selections, before casting their ballot. 

Not doing so impermissibly burdens the voting rights of Cass County voters. The constitutional 
right to vote is not satisfied by simply allowing a voter to place a ballot in a ballot box or enter 
selections on a touchscreen. “[Ijncluded within the right to choose ... is the right of qualified 
voters within a state to cast their ballots and have them counted.” 20 In that manner, the federal 
Constitution guarantees each voter the right to cast an effective vote —a ballot that is counted 
correctly towards the outcome of the election. Moreover, it also prohibits states from subjecting 
voters to arbitrary disparities in the effectiveness of their votes. 21 


16 Check Point Research, Mapping the Connections Inside Russia’s EPTEcosystem (Sept. 24, 2019), available at 
https://research.checkpoint.com/mssianaptecosvstem/. 

17 John Dabkovich, Travis Co. Hopes Paper will Protect Votes From Hackers, KXAN (Oct. 2, 2019), available at 
https://www.kxan.com/news/local/travis-coiinty/travis-co-hopes-paper-will-protect-votes-from-hackers/. 

18 Verified Voting, The Verifier - Polling Place Equipment - November 2020, available at 
https://www.verifiedvoting.org/verifier/ (last accessed Oct. 4, 2019). 

19 See, e.g.. Verified Voting, Principles for New Voting Systems, available at 
https://www.verifiedvoting.org/voting-system-principles/. 

20 United States v. Classic, 313 U.S. 299, 315 (1941); see also United States v. Saylor, 322 U.S. 385, 387-88 (1944) 
(emphasis added). 

21 See Bush v. Gore, 531 U.S. 98, 104-05 (2000) (“Having once granted the right to vote on equal terms, the State 
may not, by later arbitrary and disparate treatment, value one person’s vote over another.”). 
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A federal district court in Georgia recently applied these principles to rule that plaintiffs 
challenging a similar DRE system will likely succeed in their case. The plaintiffs in Curling v. 
Raffensberger 22 challenged Georgia’s DRE voting system on the grounds that it violated the 
constitutional rights of Georgia voters. Like the eSlate system, Georgia’s system suffers from 
significant security flaws due to vulnerabilities in its hardware and software. 23 The plaintiffs in 
Curling claim that the continued use of Georgia’s DRE voting system violates their right to vote 
under the First and Fourteenth Amendments. 24 In August, a federal judge concluded that 
Georgia’s DRE voting system does likely “burden[] and deprive[] [Plaintiffs] of their rights to 
cast secure votes that are reliably counted, as guaranteed under the First and Fourteenth 
Amendments of the United States Constitution.” 25 In doing so, the court highlighted its prior 
conclusion that Georgia’s “continued reliance on the use of DRE machines in public elections 
likely results in ‘a debasement or dilution of the weight of [Plaintiffs’] vote[s],’ even if such 
conduct does not completely deny Plaintiffs the right to vote.” 26 

The right to vote, the cornerstone of our democratic system of government, depends on a system 
of election administration that provides all eligible voters an effective opportunity to 
participate—not just those who happen to live in a jurisdiction that uses an adequate voting 
system. At minimum, this means ensuring that the machinery of democracy has the capacity to 
record and count each vote consistently, fairly, effectively, and accurately. And that means 
ensuring that there is a paper record of every vote. 

3. Implementing a New Voting System by the 2020 Election is Still a Practical Option 

In light of the urgency of ensuring that all Cass County voters have access to a secure and 
reliable voting system, we urge you to consider taking immediate steps to implement a reliable 
voting system, if you have not already done so. That system should make use of paper ballots— 
just as the systems in 122 Texas counties will by this November. Though we recognize that 
budget constraints, funding, and the need for preliminary approvals from County Commissioners 
or other officials are all serious factors, we respectfully ask that you assess the possibility of 
updating your voting systems by Election Day 2020. From our standpoint, this is a difficult but 
not an impossible task: many Texas counties have recently and smoothly transitioned to paper- 
based systems. 27 In fact, the state of Virginia moved many of its precincts from paperless DRE 


22 Curling v. Raffensberger , No. 1:17-CV-2989-AT, 2019 WL 3822123 (N.D. Ga. Aug. 15, 2019) (attached). 

23 Id. at *2-3. 

24 Id. at *1. 

25 Id. at *54. 

26 Id. at *54 (quoting Bush v. Gore, 531 U.S. 98 at 105 (alterations in original)). 

27 At least 15 Texas counties have purchased and/or deployed paper-based systems since the beginning of 2018, 
including Washington, Cooke, Caldwell, Atacosta, Rusk, Starr, Bastrop, Orange, Rockwall, Bowie, Johnson, Ellis, 
Smith, Bell, and Washington Counties. In addition, Dallas, Tarrant, Bexar, and Collin Counties—four of the largest 
counties in Texas—will be deploying paper-based systems beginning in November 2019. 
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voting machines to a paper-based systems in just 3 months. 28 In Pennsylvania, following a 
February 2018 directive 29 ordering that all new systems employ a paper vote record, 
approximately 75% of counties have deployed new systems (with the remaining counties set to 
transition by the April 2020 primary). And in South Carolina, which completed an RFP for a 
new, statewide system in July of this year, new machines have already been delivered to various 
counties. 30 

All signs suggest that help is coming—Congress is on track to appropriate substantial funding to 
upgrade states’ voting systems. 31 A bipartisan coalition recognizes the importance of ensuring 
that all voters have access to reliable voting systems. But ultimately, county officials bear 
responsibility for making sure every voter can cast a ballot that will be counted. 

We thank you for your attention to this important matter, and would welcome the opportunity to 
discuss this further. We—and the computer and cybersecurity experts who have Cass County or 
to answer any questions about steps it can take to ensure that its voters have secure, reliable, and 
auditable systems at the earliest possible date. We can be reached at the contact infonnation 
below. 


Most sincerely, 



Jamila Benkato 
Protect Democracy 

2020 Pennsylvania Ave. NW, Suite #163 
Washington, D.C. 20006 
jamila.benkato@protectdemocracy.org 



Andre Segura 

ACLU Foundation of Texas, Inc. 
P.O. Box 8306 
Houston, TX 77288 


28 See Byron Tau, Virginia Ends Use of Touch-Screen Voting Machines, Wall Street Journal (Sept. 11, 2017), 
available at https://www.wsi.com/articles/virginia-ends-use-of-touchscreen-voting-machines-1505167555 . 

29 Wolf Administration Directs that New Voting Systems in the Commonwealth Provide Paper Record (Feb. 9, 

2018), available at https://www.media.pa.gov/Pages/State-Details.aspx?newsid=261. 

30 See Kayland Hagwood, New Voting Machines Unveiled in Sumter County, WLTX19 (Oct. 4, 2019), available at 
https://www.wltx.com/article/news/local/street-squad/sumter/new-voting-machines-unveiled-in-sumter-county/101- 
850a4196-afb9-4133-ae31-9bee5d9b22cd. 

31 Carl Hulse, After Resisting, McConnell and Senate G.O.P Back Election Security’ Funding, NYT (Sept. 19, 2019), 
available at https://www.nytimes.com/2019/09/19/us/politics/mcconnell-election-security.html?module=inline. 
Although a federal appropriation for voting systems is not yet final, the House of Representatives recently 
appropriated $600 million for states to upgrade voting systems, and the Senate is on track to appropriate $250 
million. In all likelihood, this year Congress will approve an amount between those figures for states to use in 
replacing and upgrading voting systems. 
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(202)945-2157 


esaldivar@aclutx.org 
asegura@aclutx. org 
(713)325-7011 



Adrian Shelley, Director 
Public Citizen - Texas 
309 East 11th Street, Suite 2 
Austin, TX 78701 
(512)477-1155 
ashelley@citizen.org 



Sophia Lin Lakin 
Adriel I. Cepeda Derieux 
American Civil Liberties Union 
125 Broad Street, 18th Floor 
New York, NY 10004 
slakin@aclu.org 
acepedaderieux@aclu.org 
(212) 519-7836 


Attachments: 

1. Curlingv. Raffensberger, No. l:17-CV-2989-AT, 2019 WL 3822123 (Preliminary 
Injunction Order) (N.D. Ga. Aug. 15, 2019). 

2. Letter to Secretary Pablos and Director Ingraham from Texas Computer Scientists and 
Cybersecurity Experts (May 10, 2018), also available at 
https://www.cs.rice.edu/~dwallach/voting-experts-letter-mav-2018.pdf. 
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